Forum Discussion

AhmedGalal219_3's avatar
AhmedGalal219_3
Icon for Nimbostratus rankNimbostratus
Aug 07, 2018

confirm client TLS cert and Cipher

hello,

 

i have a VS with client SSL profile has 2 certificates and when client try to connect i can see on profile statistics that he has invalid certificate and when i captured the traffic i didn't see any TLS handshake only TCP!!!, from his side he sent to me a log file that confirm that he is using the right client certificates and one of F5 default TLS1.2 cipher suite with error of TLS handshake failure....

 

From F5 side how can i make sure of the certificates he is connected with and its cipher ??????

 

application delivery
iRules
LTM

3 Replies

Sort By
  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Aug 08, 2018

    If in capture, you don’t see TLS handshake, you can’t do anything on f5 side!!!

     

    In TLS, the first packet is CLIENTHELLO from client. If the client doesn’t send it, the F5 will reject the connection.

     

  • Surgeon's avatar
    Surgeon
    Ret. Employee
    Aug 08, 2018

    What port are you using on your VIP? 443? if not then it might happen that wireshark can not decode it. Just decode the traffic as SSL and you should see ssl traffic.

     

    Also check if the client hits the big-ip at all.